Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vJxDvM54RXsF-Kcb9KE3DIC2weU.roa
File: vJxDvM54RXsF-Kcb9KE3DIC2weU.roa (raw, json)
Hash identifier: LkEQ8Wl4P9Mon3tnFanWgG/VJKnM7do4ufwVEiWUiNE=
Subject key identifier: BC:9C:43:BC:CE:78:45:7B:05:F8:A7:1B:F4:A1:37:0C:80:B6:C1:E5
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D804A90D3D4670C8D791F1021F4B
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vJxDvM54RXsF-Kcb9KE3DIC2weU.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205815
IP address blocks: 194.209.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d8:04:a9:0d:3d:46:70:c8:d7:91:f1:02:1f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc9c43bcce78457b05f8a71bf4a1370c80b6c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:8f:f5:1e:88:db:55:bf:f6:6d:f2:a2:c2:
eb:08:e8:0a:d8:46:97:48:23:c5:1d:ab:ec:17:7d:
24:e0:0b:74:ce:07:49:27:a2:82:b0:48:43:44:f4:
ea:e3:0a:58:7d:89:e4:c1:78:b9:44:f9:0e:d8:0e:
26:46:29:3b:38:59:89:81:f5:b0:20:03:15:6b:61:
eb:01:cc:c2:3b:e0:80:a3:da:32:76:97:e4:2c:c1:
5c:53:5b:09:a5:04:d0:d5:9c:a4:51:ac:18:f8:b9:
16:d9:de:68:3c:4f:7d:b1:c0:02:aa:e3:a2:b1:89:
31:82:5a:b8:65:8d:96:a7:ad:78:32:c7:6f:5f:a8:
e6:04:bf:d0:7c:96:96:5e:a4:48:55:02:a6:c1:89:
95:97:1c:72:83:c5:e5:4f:75:e9:27:15:46:ec:a6:
95:71:2c:81:0a:6a:4e:89:24:d3:50:95:7e:ec:1b:
9f:e9:ea:d0:a5:36:75:1f:64:74:99:da:52:9e:7d:
bf:ed:df:b6:2c:e9:dd:67:f8:e2:88:58:a9:e3:9b:
ad:3a:7f:db:91:a5:c0:74:73:d5:d4:8f:68:cc:28:
eb:0e:96:cd:9c:36:4e:e6:0b:54:e6:50:fd:fc:b5:
69:41:5c:57:31:4b:5b:82:a2:98:d4:b1:78:bf:f8:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:43:BC:CE:78:45:7B:05:F8:A7:1B:F4:A1:37:0C:80:B6:C1:E5
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/vJxDvM54RXsF-Kcb9KE3DIC2weU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
06:89:0b:c2:c9:a1:5a:c1:8a:99:31:ef:14:95:92:fb:b1:5f:
c3:07:ba:ff:f5:13:ae:af:0b:9b:43:f7:74:18:11:90:09:26:
4e:26:e5:61:7a:78:94:66:41:80:e8:cb:66:3e:de:45:cb:8e:
f8:38:6a:72:e7:e9:fc:54:6c:6f:49:45:87:53:b2:c7:50:53:
02:ad:4c:9e:fb:8c:ff:99:fd:f3:d8:da:d4:19:b1:a2:1f:51:
da:68:fc:e8:15:fa:c6:07:18:88:32:41:f4:72:a0:9f:67:4e:
b3:e2:c0:0a:54:65:cd:62:17:27:e1:1c:9c:6c:de:6a:44:51:
b2:99:f5:74:e4:62:f1:e3:46:58:bf:65:01:0b:2a:46:d5:fc:
74:51:d1:70:84:f0:e4:da:a9:f1:9f:8b:32:a9:bd:04:89:6e:
41:a6:f9:23:62:4b:fd:36:5e:34:c5:d9:d8:ab:4a:e5:6f:07:
0e:87:b5:2a:13:24:51:8d:2e:7d:5c:99:0b:1e:ba:20:13:b1:
91:d9:8b:42:a1:13:fb:aa:16:d3:46:83:52:c4:e2:3e:e2:e2:
23:86:17:55:71:ad:f6:19:fc:a6:b0:55:df:5a:cb:92:77:6e:
ea:15:39:8e:87:5b:6e:6c:d9:d3:05:c5:37:21:c3:16:92:46:
01:96:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:37:38 2025 by rpki-client